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Abstract 



1 Introduction 



Von Neumann's Min-Max Theorem guarantees that each 
player of a zero-sum matrix game has an optimal mixed 
strategy. We show that each player has a near-optimal 
mixed strategy that chooses uniformly from a multiset of 
pure strategies of size logarithmic in the number of pure 
strategies available to the opponent. Thus, for exponen- 
tially large games, for which even representing an optimal 
mixed strategy can require exponential space, there are near- 
optimal, linear-size strategies. These strategies are easy to 
play and serve as small witnesses to the approximate value 
of the game. 

Because of the fundamental role of games, we expect this 
theorem to have many applications in complexity theory and 
cryptography. We use it to strengthen the connection estab- 
lished by Yao between randomized and distributional com- 
plexity and to obtain the following results: (1) Every lan- 
guage has anti-checkers — small hard multisets of inputs 
certifying that small circuits can't decide the language. (2) 
Circuits of a given size can generate random instances that 
are hard for all circuits of linearly smaller size. (3) Given 
an oracle M for any exponentially large game, the approx- 
imate value of the game and near-optimal strategies for it 
can be computed in Eg M '. (4) For any NP-complete lan- 
guage L, the problems of (a) computing a hard distribution 
of instances of L and (b) estimating the circuit complexity 
of L are both in Ef ■ 
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Games play a fundamental role in many parts of the- 
ory. For example, cryptographic problems can often 
be viewed as games between those who wish to keep 
a secret and those who wish to discover it [|. Many 
computational classes can be defined in natural ways as 
games: for example, PSPACE can be defined in this way 
[pj. Other times games arise in a slightly more subtle 
way. For example, questions about how hard it is to 
generate hard instances of some problem can be mod- 
eled as a game between the generator and the algorithm. 
Yao [H| exploits this idea to prove lower bounds on 
randomized algorithms. 

The classic result on games is the famous Min-Max 
Theorem of von Neumann [fT?! , which guarantees that 
each player of a zero-sum game has an optimal mixed 
strategy. For exponentially large games, optimal strate- 
gies are generally exponentially large. In many cases, 
we need to know not only that an object exists but also 
that it is not too complex. Without this latter restric- 
tion we cannot use the object. 

Simple strategies for large games. Our first result 
is a variant of von Neumann's Min-Max Theorem that 
shows that each player has a near-optimal mixed strat- 
egy that plays uniformly from a multiset of size logarith- 
mic in the number of pure strategies available to the op- 
ponent. The proof is a surprisingly simple probabilistic 
argument similar to circuit derandomization techniques 
jj], |l5| . However, the central nature of games in theory 
suggests that this simple result may have far-reaching 
consequences. This result was obtained independently 
by Althofer §. 



Strengthening the connection between random- 
ized and distributional complexities. This con- 
nection was first established by Yao jl8| |l9). He con- 
sidered a game where Min's pure strategies are the 
deterministic algorithms in a given class, Max's pure 



strategies are the inputs of a given size, and the pay- 
off for a particular pair is the cost of the algorithm on 
the input. If Min moves first, the expected payoff can 
be interpreted as the worst-case expected complexity of 
the best randomized algorithm. If Max moves first, 
the expected payoff can be interpreted as the average- 
case complexity of the best algorithm for the hardest 
input distribution. By von Neumann's theorem, these 
are the same. Thus, the worst-case complexity of the 
best randomized algorithm equals the optimal average- 
case complexity against the hardest input distribution. 

A main drawback is that for equality to hold, the 
"randomized algorithms" must generally be allowed to 
have exponentially large encodings. Because of this, 
Yao's theorem has been used mainly in the weaker di- 
rection: to prove lower bounds on randomized complex- 
ity and upper bounds on average-case complexity. The 
stronger direction (equality) holds only for complexity 
measures that allow program size to grow exponentially 
with input size. 

Our variant of the Min-Max theorem reduces the de- 
pendence on encoding size. Our variant implies that 
it suffices to consider randomized algorithms that have 
linear-size encodings. Thus, the stronger direction holds 
(approximately) for complexity measures that allow 
program size to grow linearly with input size. This in- 
cludes most measures of circuit complexity. 

Note that this application is similar to known cir- 
cuit derandomization techniques |l5|]. However, the 
theorem has many other applications. For instance, by 
applying it to the program/input game for the input 
player we show that there are hard distributions that 
can be generated by small circuits. 

Anti-checkers and circuits that generate hard 
random instances. We give applications concerning 
the complexity of generating and solving hard random 
instances of problems. Our main application is to show 
that every language has anti- checkers — small multisets 
of inputs such that correctly classifying a fraction of the 
inputs in the multiset is nearly as hard as correctly clas- 
sifying all inputs of the given size. Circuits of a given 
size can use anti-checkers to generate random instances 
that are hard for all slightly smaller circuits. 

Uniform complexity. We obtain related results for 
uniform complexity measures. Specifically, we show 
that the following problems are in : 

• estimating the value of any exponentially large 
game given an oracle for the payoffs; 

• computing approximate upper and lower bounds on 
the circuit complexity of L and 

• computing hard random instances of L, 
where L is any NP-complete language. 



2 Other Related Work 

Theorem ^, our first variant of von Neumann's Min- 
Max Theorem, was obtained independently by Althofer 
||. He considers applications to other linear programs, 
large game trees, and uniform sampling spaces. 

A subsequent work Q gives simple greedy algo- 
rithms that (given the payoff matrix) find the fc-uniform 
strategies shown to exist in Theorems || and |[ 

Uniform complexity. As mentioned previously, the 
complexity class PSPACE has a natural characteriza- 
tion via games. More recently, the complexity classes 
NEXP and coNEXP have been similarly characterized 
. Our variant of von Neumann's Theorem can be used 
in these characterizations of NEXP and coNEXP. 

Most research on hard distributions to date concerns 
uniform complexity. A significant body of work con- 
cerns average-case completeness, e.g, || [l6| [h], [H| |J] ■ 
These results are analogous to NP-completeness re- 
sults, except they concern distributional problems - 
(problem, input distribution) pairs. These results re- 
late the complexities of classes of distributional prob- 
lems. Generally, few relations to worst-case complexity 
are known (see, however, [Q). 

Ben-David et al. j| and Li and Vitanyi |l3| show the 
existence of distributions under which the average-case 
complexity of any program is within a constant (expo- 
nential in the size of the program) of the worst-case com- 
plexity. Generating random instances from such distri- 
butions is difficult — it requires diagonalizing against 
all programs in question. The result applies to uniform 
complexity classes, not circuits. More precisely, it gen- 
erates inputs that are hard only for programs that are 
exponentially smaller than the inputs. 

Circuit complexity. Schapire [Q shows that his 
technique for boosting the correctness of PAC-learning 
strategies can also be applied to boost the correctness of 
circuits. This implies the existence of distributions from 
which random instances are nearly as hard for circuits 
as worst-case instances. His results establish a version 
of Corollary ||, weaker in that the complexity of generat- 
ing the distribution is not known and in that the factor 
in bound (Q) is a larger polynomial. 

Upper bounds. One example of the use of the Min- 
Max Theorem in the stronger direction (to upper bound 
randomized complexity, measured, in this case, by the 
competitive ratio) is given by Alon, Karp, Peleg and 
West They show the existence of randomized k- 
server strategies by considering a certain zero-sum ma- 
trix game. The competitiveness of the strategy is re- 
lated to the value of the game, which in turn depends 
on the underlying metric space. 



3 Simple Strategies 

A two-player zero-sum game is specified by an r x c 
matrix M and is played as follows. MiN, the row player, 
chooses a probability distribution p over the rows. Max, 
the column player, chooses a probability distribution q 
over the columns. A row i and a column j are drawn 
randomly from p and q, and MiN pays My to Max. 
Min plays to minimize the expected payment; Max 
plays to maximize it. The rows and columns are called 
the pure strategies available to Min and Max, respec- 
tively, while the possible choices of p and q are called 
mixed strategies. The Min-Max Theorem states that 
playing first and revealing one's mixed strategy is not a 
disadvantage: 

Theorem 1 (@) 

min max N p (i ) M, , ; = max min N q(j ) Mi j 

V j 1 i — J 

i j 

Note that the second player need not play a mixed strat- 
egy — once the first player's strategy is fixed, the ex- 
pected payoff is optimized for the second player by some 
pure strategy. The expected payoff when both players 
play optimally is called the value of the game. We de- 
note it V(M). 

3.1 Simple strategies for large games. 

Games that model computations are often exponen- 
tially large. Generally, the optimal strategies are the 
primal and dual solutions, respectively, to an 0(NM)- 
size linear program. For exponentially large games, op- 
timal strategies are generally too large to even represent. 
This motivates considering smaller mixed strategies: 

Definition 1 A mixed strategy is fc-uniform if it 
chooses uniformly from a multiset of k pure strategies. 

We show that for fc proportional to the logarithm of 
the number of pure strategies available to the opponent, 
each player has a near-optimal fc-uniform strategy. 

Let M m ; n and M max denote miny My and maxy My , 
respectively. Recall that M is an r x c matrix. 

Theorem 2 For any e > and k > ln(c) / 2e 2 , 

min max Vp(i)My < V(M) + e(M max - M min ), 
pe^ic 3 

i 

where Vk denotes the k-uniform strategies for MiN. 
Equality holds only if k — ln(c) / 2e 2 . The symmetric 
result holds for Max. 

Proof Assume WLOG that M m i n = and M max = i. 
Fix e > and fc > ln(c) / 2e 2 , and form S by drawing 
fc times independently at random from Min's optimal 



mixed strategy. For any fixed pure strategy j of the 
opponent, the probability that 

£r^My>V(M)+e (i) 

is bounded by e~ 2kt ~ . This is because the left-hand side 
is the average of fc independent random variables in [0, 1] 
with expected value at most V(M) |p"if . 

By the choice of fc, e~ 2ke < 1/c. Thus, the expected 
number of the opponent's c pure strategies that satisfy 
is less than 1. Since the number of such strategies 
is an integer, it must be zero for some S of size fc. rn 

For many important games, M max — M m j n is constant. 
In this case, the theorem says that for any e, MiN has 
an 0(log c)-uniform strategy that is within e of optimal. 

To model dovetailing computations, we give the fol- 
lowing variant, in which MiN plays a small subset of 
pure strategies (called a dovetailing set) simultaneously, 
choosing the best once Max commits to a play. 

Theorem 3 For e > and fc > log 1+c c, 

min max min My < V(M) + e(V(M) - M min ). 

\S\=k j i€S 

Equality holds only if k = log 1+e c. The symmetric re- 
sult holds for Max. 

We omit the proof, which is similar to the proof of The- 
orem 0. 

4 Distributional vs. Randomized Com- 
plexity 

We next consider Theorems |^ and |^ in the context of 
the program/input game introduced by Yao. 

Definitions 2 Fix a finite class V of programs, a finite 
class X of inputs and a function M : V x T — » ( where 
M(i,j) represents some cost of the computation 

The (unlimited) randomized complexity of M is 
min p maxjgi ^ i p(?)M(z, j), where p ranges over the 
probability distributions on V. 

The (unlimited) distributional complexity of M is 
max g min ig -p J^ . q(J)M(i, j), where q ranges over the 
probability distributions on T. 

The program/input game for M is the two-player 
zero-sum game given by Mij — M(i,j) for i 6 V and 

3 el. 

As Yao observed, von Neumann's theorem applied 
to the program/input game implies that the unlimited 
randomized complexity and the unlimited distributional 
complexity are equal to V(M). As a corollary of Theo- 
rem applied for each player, we obtain the following. 



Definitions 3 A fc-uniform randomized program is a 
randomized program obtained by playing uniformly from 
a multiset of k programs in V. 

The /c-uniform randomized complexity of M is 
min p maxjgj ^ i p(i)M(i, j), where p ranges over the It- 
uniform distributions on V . 

The fc-uniform distributional complexity of M is 
max g min^g-p . q(j)M(i, j), where q ranges over the It- 
uniform distributions on I. 

Corollary 4 Let A = Af min - M max . 

1. For any e > and k > ln(|2T|) / 2e 2 , the k-uniform 
randomized complexity of M exceeds the unlimited 
randomized complexity by less than eA. 

2. For any e > and k > ln(\V\) /2e 2 , the unlim- 
ited distributional complexity of M exceeds the k- 
uniform distributional complexity by less than eA. 

A good fc-uniform randomized program corresponds 
to a multiset of k programs such that, for any input, 
the average complexity of those programs on that input 
is close to the unlimited randomized complexity of M. 
A good /c-uniform input distribution corresponds to a 
multiset of k inputs such that, for any program, the 
average complexity of that program on those inputs is 
close to the unlimited distributional complexity. 

Sometimes it is also useful to consider small sets 
of programs such that, on any input, some program 
achieves a low complexity on that input. Similarly, one 
might want a small set of inputs such that any program 
has high complexity on at least one of the inputs in the 
set. We call such small sets dovetailing sets. As a corol- 
lary to Theorem [| we obtain the following. 

Corollary 5 1. For any e > and k > log 1+e 

there exists a set of at most k programs such that, 
for any input, the complexity of some program in 
the set is less than V(M) + e(V(M) - M min ) on 
that input. 

2. For any e > and k > log 1+e \V\, there exists a 
set of at most k inputs such that, for any program, 
the complexity of the program is more than V(M) — 
e(-M max — V(M)) on some input in the set. 

5 Anti-checkers against circuits. 

An anti-checker for L against circuits of size s is a 
multiset of inputs such that any circuit of size s fails 
to correctly classify (w.r.t. L) a fraction of the inputs 
in the multiset. Anti-checkers are similar to program 
checkers [^| (which verify program correctness on a per- 
input basis) in that anti-checkers allow certification of 
the complexity of L on a per-circuit basis. 



We apply Corollary || is to show that, provided s is 
slightly less than the circuit size required to decide L 
without error, there are anti-checkers for L of size O(s). 
As a consequence, we obtain small circuits that generate 
hard random inputs. 

Other flavors of anti-checkers for various complexity 
measures and with different notions of "anti-checking" 
are possible. To illustrate the issues, at the end of this 
section we give a variation in which the anti-checker is a 
small set of inputs such that any program of a given size 
has a high running time on at least one of the inputs in 
the set. 

The first form of anti-checker is obtained by applying 
Corollary | to a program/input game where the pro- 
grams are the circuits of size s and the inputs are the 
binary strings of size n. (More generally, we could take 
the programs to be those with encoding i (0 < i < 2 s ) 
and the inputs to be those with encoding j (0 < j < 2"). 
We require only that the program encoding scheme sat- 
isfy some basic compositional properties.) We take the 
complexity measure to be correctness, i.e., the payoff of 
the program/input game is zero if the program is correct 
on the input and one otherwise. 

As described below in the proof of Theorem |^, a fc- 
uniform randomized program with worst-case probabil- 
ity of error less than 1/2 yields a deterministic program 
of size 0{ks) that is correct on all inputs. Thus, for cir- 
cuits just slightly smaller than the smallest circuit de- 
ciding membership without error, there are hard input 
distributions on which no such circuit achieves a proba- 
bility of error significantly less than 1/2. Further, there 
are such hard input distributions which are fc-uniform 
for small k. The underlying multiset yields the desired 
anti-checker. 

Definition 4 Define Cl, the circuit complexity of lan- 
guage L, to be the function such that Ci,(n) is the size 
(length of the encoding in binary) of the smallest circuit 
deciding membership in L of all n-bit binary strings. 

Theorem 6 There exists a number N such that, for 
any language L and numbers n > N , e > 0, and 
s < CL(n)e 2 j 3n, there exists a multiset of s/e 2 length 
n binary strings such that every circuit of size s mis- 
classifies at least a fraction 1/2 — e of the strings in the 
multiset. 

Proof Let M(i, j) be if the ith size s circuit correctly 
decides whether the jth n-bit binary string is in L and 
1 otherwise. Let 5 = 1/2 - V{M). The two parts of 
Corollary ^ respectively imply: 

i. There are 1 + nln(2) / 25 2 circuits of size s such 
that on any n-bit string, a majority of the circuits 
classifies the string correctly. 



ii. Provided e > 8, there are sln(2) / 2(e — 8) 2 n-bit 
strings such that any size s circuit misclassifies at 
least a fraction 1/2 — e of the strings. 

From (i), it follows that there is a circuit of size 
ns ln(2) / 28 2 + s + 0(n/5 2 ) that correctly classifies all 
n-bit strings. (The circuit returns the majority of what 
the n/25 2 circuits return.) Thus, ns ln(2) / 2d 2 + s + 
0(n/8 2 ) > Ci(n). By the choice of s, this implies 
S/e < ^ln(2) / 6 + 0(l/n). This implies that, for large 
enough n, the number of strings in (ii) is at most s/e 2 . 

□ 

For instance, taking e = 1/3, n > N and s < 
Cz,(n)/27n, there exists a multiset of 9s inputs such that 
any circuit of size s errs on one sixth of the inputs in 
the multiset. Intuitively, the problem of computing all 
2™ inputs correctly is harder than the problem of com- 
puting a fraction of a fixed multiset of inputs correctly. 
Thus, it is surprising that such hard multisets exist. 

Note also the contrapositive: to show that Cj,(n) < 
27ns, it suffices to exhibit, for every multiset of 9s in- 
puts, a size s circuit that errs on less than one sixth of 
the inputs in the multiset. Note that the tradeoff here is 
close to tight: for any such multiset, some circuit of size 
O(sn) correctly classifies every input in the multiset. 

Similar results are possible for other complexity mea- 
sures (e.g., running time, space, circuit depth, etc.). 
There are three general considerations: 

1. Instead of considering expected complexity (e.g., the 
expected running time of a program) , one considers 
the probability that the complexity exceeds a given 
threshold. This yields a game with small M max — 
V(M), which allows small anti-checkers. 

2. For some complexity measures, to build a deter- 
ministic program that has low complexity on all 
inputs, it suffices to find a small set of programs 
such that, on any input, at least one (as opposed 
to a majority) of the programs in the set has low 
complexity. 

3. One might be interested in a weaker form of anti- 
checker, one such that any program has high com- 
plexity on at least one (as opposed to a fraction) of 
the inputs in the set. 

The following example illustrates these three consid- 
erations. 

Definitions 5 LetVi,(n,t) denote the size oj "the small- 
est program that decides language L in time t for all 
n-bit inputs. 



programs of size s that correctly decide L on inputs of 
size n. 

There exists a set S CI of size 



such that each program in V requires more than time t 
on some input in S. 

Proof For i 6 P and j £ X, let M(i,j) be zero if 
program i runs in time t on input j and one otherwise. 
The value of the program/input game for M is the min- 
imum probability of exceeding time t by any program 
on a random input from the hardest input distribution. 
Let this value be 1 — 8. By Corollary [|, 

i. Taking e = 1/(1 - 8) - 1, for k = 0(n/5), there 
exists a set of k programs such that, for any input, 
the complexity of some program in the set is less 
than 1 = (1 — S)(l + e) on that input. 

ii. Taking e = 1/S - 1, for k = 0(s/log(l/£)), there 
exists a size k set of inputs such that, for any pro- 
gram, the complexity of the program is more than 
= 1 — 8(1 + e) on some input in the set. 

By (i), there exists a program of size 0(ns/S) that 
correctly classifies each size n input in time 0(nt). 
This program simply dovetails the k programs in the 
set and returns when the first program finishes. (At 
least one of the programs finishes in time t.) Thus, 
<5 = 0(sn/C L (n,0(ni))). 

By (ii), there exists a set of 0(s/ log(l/<5)) inputs such 
that any program of size s takes time at least t on at 
least one of the inputs in the set. rj 

5.1 Generating hard random instances. 

An easy corollary of the existence of small anti- 
checkers is that circuits of a given size (up to the circuit 
complexity of the language) can generate random inputs 
that are hard for all slightly smaller circuits to classify 
correctly. 

Definition 6 For any probability distribution D on 
{0,1}*, define Cl.d, the circuit complexity of deciding 
(L, D) with error, to be the function such that CL,D{n, e) 
is the size of the smallest circuit deciding membership 
in L with probability of error at most e when given a 
random input drawn from D restricted to strings of size 
n. 



Theorem 7 Fix any language L and numbers n, t and Corollary 8 There exists an N such that, for any lan- 
s < Vij{n,t). Let I be the inputs of size n; let V be the guage L, and any numbers n > N, < e < 1/2, and 



s' < Cl (n) , some circuit of size s' computes a distribu- 
tion D such that 

C L , D (n,l/2-e) > n(s'e 2 /n) (2) 
C L , D (n,0) < O(s'). (3) 

The proof is a straightforward application of Theorem 
- the circuit computes the uniform distribution on 
the anti-checker against circuits of size f2(s'e 2 /n). 

5.2 Finding near-optimal strategies non- 
deterministically. 

Small simple strategies approximately determine the 
value of any game. Thus, for exponentially large 
games, under the right conditions, one can non- 
dctcrministically verify the approximate value. 

Theorem 9 Given e > 0, r, c, and an r x c game M 
in the form of a poly-time oracle computing Mij from i 
and j , the problem of computing for each player a mixed 
strategy that guarantees a payoff within e(M max — M m ; n ) 

ofV(M) is in E 2 > where P(M) means polynomial in 
r + c + log(rc)/e. 

Proof We describe a E 2 M ' computation that guesses 
and verifies the strategies for both players simultane- 
ously, assuming WLOG that M max = 1 and M m ; n = 0. 

Non-deterministically guess an approximate value v 
for V(M). By Theorem |L there is a strategy for MlN 
that chooses uniformly from a multiset S of k pure 
strategies, where k — (9(log(c) / e 2 ), and that guar- 
antees a payoff less than V(M) + e/2. Guess S non- 
deterministically. Use a non-deterministic oracle query 
to verify that 

(Vj)g^M y - < W + e/2. 

Similarly, guess and verify a mixed strategy for Max 
that guarantees a payoff of at least v — e/2. 

Because each strategy guarantees an expected payoff 
within e of that guaranteed by the other, each expected 
payoff is within e of optimal, rn 

5.3 Estimating circuit complexity and gen- 
erating hard distributions in S^nll^. 

Using the close relationship established in Theorem 
U between circuit complexity and the value of the pro- 
gram/input game defined there, we can in some sense 
specialize the preceding theorem to obtain the follow- 
ing result, which can be interpreted as showing that the 
circuit complexity of any NP-complete language can be 
approximated within a linear factor in E^ H n^. 



Theorem 10 1. For any NP language L, there ex- 
ists a decision procedure A in E^ such that A(n, s) 
accepts if Cl(u) > 3ns but rejects if C^in) < s. 

2. For any NP-complete language L, there exists a de- 
cision procedure B in such that B(n, s) accepts 
if 'Cx(n) < s but rejects ifCj,(n) > s. 
Here the class P is those languages decidable in time 
polynomial in n and s. 

Proof Let L = {x : (By) £(x, y)} be defined by the 
poly(|a;|)-time predicate I. 

The decision procedure A non-deterministically 
guesses an anti-checker and uses standard techniques 
to verify it. By Theorem [| if Cr,(n) > 3ns, then there 
are O(s) inputs {xi : i = 1, ..,0(s)} such that any cir- 
cuit of size s misclassifies at least one input Xi. On the 
other hand, if C^(n) < s then clearly no such set exists. 
Thus, the following predicate is true if C^(n) > 3ns but 
false if Cl(u) < s: 

(Bxi,...,x ( s )) (VC) (Bi) 
(C(x i )=0A(By i )e(x i ,y i ) - 1) 
V(C( Xi ) = 0A(Vzi)t(x u Zi) =0), 

where C ranges over all size s circuits and the 
Xi's range over the n-bit strings. The "(Bi)" 
quantifies over polynomially many i, so it can 
be expanded into an appropriate poly-size for- 
mula. Using standard quantifier-elimination tech- 
niques, the resulting expression can be converted to 
the form (BX, y)(VC, Z)£'(n, s, C, X, Y, Z), where f is 

a poly(n, s)-time predicate. Thus, the predicate is in 
y p 

We construct the decision procedure B(n,s) using 
standard techniques. It is known that, since L is NP- 
complete, the circuit complexity of the "witness" func- 
tion w such that £(x, w(x)) for x G L is only polyno- 
mially larger than Cl(u). Thus the following predicate 
holds iff C L (n) < s. 

(BC,W)(Vx) 
(C(x)=0A(Vy)£(x,y) = 0) 
V (C(x) = lM(x,W(x)) = 1), 

where C ranges over all circuits of size s, W ranges over 
all circuits of size large enough to compute the witness 
function, and x ranges over all inputs of size n. This 
predicate is clearly in E^. rj 

5.4 Hard distributions for uniform com- 
plexity classes. 

The first part of the proof of Theorem [To] can easily 
be modified to show that hard distributions for NP- 
complete languages can be computed in Ef. This gives 
the following result. 



Proposition 11 Assume the polynomial-time hierar- 
chy doesn't collapse to Ef and let k > 0. For any NP- 
or co- NP- complete language L there is a distribution D 
on n-bit strings such that 

• D is computable in 

• no 0(n k )-time algorithm (even with 0(n k ) advice), 
when given a random input from D, decides mem- 
bership in L with probability of error less than 
1/2- l/n k . 

We leave the proof to the full paper. 
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